CVE Feed

    Dashboard / CVE / CVE-2025-4047

    CVE-2025-4047

    The Broken Link Checker plugin for WordPress is vulnerable to unauthorized data access due to a missing capability check on the ajax_full_status and ajax_dashboard_status functions in all versions up to, and including, 2.4.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view the plugin's status.

    Published:Jun 3, 2025
    Last Modified:Apr 21, 2026
    EPS:Jun 3, 2025
    EPSS Score:0.00159
    CVSS Score:4.3

    Affected Products

    Vendor
    Wpmudev
    Product
    Broken Link Checker

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-862 Missing Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2026-84772 (CVSS 5.5) — Editor Server Side Request Forgery (SSRF) in Broken Link Checker <= 2.4.14 versions.…
    CVE-2026-75528 (CVSS 7.2) — The Broken Link Checker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author U…
    CVE-2024-8981 (CVSS 7.1) — The Broken Link Checker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of…
    CVE-2024-28890 (CVSS 5.3) — Forminator prior to 1.29.0 contains an unrestricted upload of file with dangerous type vulnerability. If this …
    CVE-2024-25592 (CVSS 5.9) — Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV…
    CVE-2015-10098 (CVSS 3.5) — A vulnerability was found in Broken Link Checker Plugin up to 1.10.5 on WordPress. It has been rated as proble…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High